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© The present invention provides a transponder 
which can only be programmed by an authorized 
user. 

It includes a Cyclic Redundancy Check (CRC) 
generator which checks during a WRITE function the 
data that is received from the reading/Writing (R/W) 
unit and also generates several protection bits (Block 
Check Character; BCC) which are sent back during 
the response function (READ). Before the CRC gen- 
erator checks the data during a WRITE function, 
however, it must be set to a predetermined start 
value called a Segment Code of the transponder in 



order for a Write (or a READ) to be performed. 
Furthermore, a Selective Addressing function is pro- 
vided. The programming of the Selective Address 
must be done within a predetermined time window 
(has a predetermined Time Code). If either the 
Selective Address or the BCC generated by the 
CRC generator is incorrect, the transponder can be 
discharged such that it will not respond. In addition, 
if the R/W unit detects that the Selective Address is 
being programmed at a time other than the predeter- 
mined Time Code, the reader makes the transpon- 
der inoperative in yet another way. 
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FIELD OF THE INVENTION 

This invention describes a procedure and cir- 
cuit arrangement which protects against data ma- 
nipulation of passive transponders in RF-ID sys- 
tems. 



CRC generator is incorrect, the transponder can be 
discharged such that it will not respond. In addition, 
if the R/W unit detects that the Selective Address 
is being programmed at a time other than the 
5 predetermined Time Code, the reader makes the 
transponder inoperative in yet another way. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The invention will be explained in greather de- 
tail with reference to an example of an embodiment 
shown in the drawings, in which: 

Figure 1 shows a schematic diagram of the 
manipulation protected transponder; 
Figure 2 shows the WRITE data sequence for 
the Selective Programming function; 
Figure 3 shows the WRITE data sequence for 
the Selective Read function; and 
Figure 4 shows the response (READ) data se- 
quence. 

DESCRIPTION OF THE PREFERRED EMBODI- 
MENTS 

Batteryless transponders which have a contact- 
less Selective Read and Selective Programming 
function, are used in security access and toll ap- 
plications. Data security and protection against ma- 
nipulation or tampering are essential in this case. A 
suggested solution describes a procedure and a 
circuit arrangement, which realizes a high degree 
of data protection. This system is usable with tran- 
sponders which use a separate charge and re- 
sponse phase. The protection-against-manipulation 
transponder contains a hardware CRC generator 16 
which checks the data that is received form the 
R/W unit (not shown) during a Programming and 
Read function and also generates several protec- 
tion bits, BCC characters, which are sent back 
during the response function (READ). Before the 
CRC generator 16 checks the data or starts to 
generate a BCC, it must be set to a predefined 
start value called a Segment Code. In addition, for 
an accurate WRITE (Programming) and READ 
function, the CRC generator in the R/W unit and 
the CRC generator in the transponder must not 
only use the same CRC algorithm, but also must 
use the same Segment Code. If the R/W unit uses 
a different Segment Code than the transponder 
does, the end value of the CRC generator is not 
zero, the transponder will discharge its capacitor 
(no response). Because of the more than 65K pos- 
sibilities of the Segment Code, it is extremely dif- 
ficult for a manipulator to find the correct one, 
especially because the Segment Code is not di- 
rectly included in the data format. Segment Codes 
can be selected to differentiate, for example, each 
market segment of an organization, or each dif- 



BACKGROUND OF THE INVENTION 

RF-ID systems in the past, which may use w 
battery-less or passive transponders, which depend 
upon the rectification of the interrogation signal for 
power, have mainly been comprised of transpon- 
ders with read-only capability. The transponders 
were constrained in size, to facilitate implantation, is 
for example, in animals, and in cost to keep manu- 
facture expenses at a minimum, however, the ap- 
plications RF-ID systems continued to grow and 
with it, technical demands for a better, more im- 
proved RF-ID system. 20 

One major improvement to the existing RF-ID 
systems, was the implementation of a Read-Write 
transponder. With Read/Write capability, numerous 
applications arose such as airline baggage tracking, 
warehouse goods tracking and assembly line piece 25 
part tracking. One growing area of interest in Read- 
Write applications is in security access and toll 
applications which require remote Read and Pro- 
gramming (Write) functionality. Remote Read and 
Programming transponders are, however, prone to 30 
being tampered with due to the potential gain of 
succeeding, i.e. unauthorized access to a secure 
area or free passage through a toll booth. Data 
security and protection against data manipulation 
are essential in these applications. 35 

SUMMARY OF THE INVENTION 

The object of the invention is to eliminate the 
above-mentioned problems and provide a tamper- aq 
proof, batteryless, remote transponder which will 
only be programmable by an authorized user. This 
goal is achieved through the use of a hardware 
Cyclic Redundancy Check (CRC) generator which 
checks during a WRITE function the data that is 45 
received from the reading/Writing (R/W) unit and 
also generates several protection bits (Block Check 
Character, BCC) which are sent back during the 
response function (READ). Before the CRC gener- 
ator checks the data during a WRITE function, 50 
however, it must be set to a predetermined start 
value called a Segment Code of the transponder in 
order for a Write (or a READ) to be performed. 
Furthermore, a Selective Addressing function is 
provided. The programming of the Selective Ad- 55 
dress must be done within a predetermined time 
window (has a predetermined Time Code). If either 
the Selective Address or the BCC generated by the 



<EP 0640939A2_L> 



3 



EP 0 640 939 A2 



4 



ferent application within a particular market seg- 
ment, or to even differentiate customers. 

The Segment Code in the transponder can be 
modified and fixed contactless during a program- 
ming function either in production or in the user 
application, and cannot be modified or READ after 
it is fixed. This characteristic prevents unauthorized 
users from changing the Segment Code to a code 
only they will recognize such that they can pro- 
gram and READ the transponder (and others can- 
not) as well as prevents unauthorized users from 
determining what the authorized users Segment 
Code is such that they can program and READ the 
transponder unauthorized. 

The Segment Code in the R/W unit can be 
protected against manipulation using on-chip 
microcomputers or Programmable Read-Only 
Memory (PROM) circuits. Additionally, the Seg- 
ment Code in the transponder is protected by 
storing the Segment Code in the Transponder is 
protected by storing the Segment Code in an Elec- 
trically Erasable Programmable Memory (EEPR- 
OM) 26 which can be locked (fixed) using another 
EEPROM cell. Programming or locking functions 
are provided for the EEPROM cell, but no function 
is provided for unlocking the EEPROM cell. The 
Control Logic Circuit 22 controls access to the 
Segment Code. Manipulation trials where a user 
tries to unlock the EEPROM will either destroy the 
transponder physically when the manipulator tries 
to open the housing of the transponder, or the 
memory content will change to an undefined value 
so that the memory is no longer readable. An 
alternative to storing the Segment Code in an 
EEPROM is to store the Segment Code in a pro- 
grammed mask or a ROM programmed Segment 
Code. Both alternatives offer enhanced manipula- 
tion security due to the inalterable characteristics of 
this type of storage, however, also offer much less 
flexibility for the same reason. 

To prevent discovery of the transponder data 
format (and BCC) by a READ of the Transponder 
by an unauthorized user, the transponder com- 
prises a Control Logic circuit 22 which is equipped 
with a Discharge Function as shown in Figure 1. If 
the transponder is charged only (CHARGE) or if 
wrong data is written into the transponder (see 
Figures 2 and 3), the Control Logic circuit 22 will 
detect this and will therefore initiate the discharge 
of the charge capacitor C1 of the transponder, 
which results in no response signal being sent 
back to the interrogator by the transponder, in this 
way, discovery of response data formats is prohib- 
ited. If after the CHARGE phase, data is received 
with the correct number of bits, the transponder will 
check if the CRC generator 16, through which all 
received bits are shifted, has a predetermined val- 
ue, than the R/W unit has sent a Frame BCC which 
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relates to the EEPROM Address and EEPROM 
data, (i.e. Selective Address and eventually time 
code and data) of the transponder. 

An Application Specific R/W unit is a R/W unit 

5 which reads or programs only certain type of tran- 
sponders, i.e. either security access transponders 
or toll-tag transponders, etc. It is impossible to read 
or program a transponder used for animal iden- 
tification, with a reader built for security access. To 

70 make it more complicated for people who try to 
manipulate with an Application Specific R/W Unit 
(ASRW), which inherently already knows the Seg- 
ment Code due to its application specific nature, an 
Addressing Function is provided in the transpon- 

75 der. 

Therefore, even if a manipulator has discov- 
ered the correct Segment Code or uses a ASRW 
unit with the correct Segment Code, he must, in 
addition, determine the Selective Address, The 

20 Selective Address is a kind of password and can 
be defined and eventually be permanently stored 
by the authorized transponder user in one location 
of the transponder's memory. The transponder will 
not respond or program unless the correct Selec- 

25 tive Address is sent to and received by the tran- 
sponder. Otherwise, the transponder will discharge 
itself. The selective Address can be different for all 
transponders in an application or can be the same 
for all transponders in an application. In any case, 

30 the reader or the host computer must know the 
predetermined Selective Address to have access to 
the Read, Program, or Lock functions within the 
transponder. 

A portion of the programmable data bits in the 

35 EEPROM circuit 20 are used as the Selective Ad- 
dress. This address can be modified by the au- 
thorized user, but the reader will only program a 
new Selective Address if the old Selective Address 
matches with a Time Code, which is stored in 

40 another portion of the EEPROM data within the 
transponder. For example, in a security access 
application, an unauthorized use discovers what the 
Selective Address is and tries to modify the Selec- 
tive Address at the wrong time interval. The reader 

45 checks the time code in the transponder and de- 
tects the discrepancies in the times and will auto- 
matically reprogram the Selective Address to an 
incorrect value and will deny access to whichever 
area is being secured. 

so Similarly, if the Selective Address is modified 
illegally using an Application Specific R/W Unit, the 
difference between the Selective Address and 
Time Code can be recognized at, for example, a 
toll station, and an alarm can be initiated or the 

55 transponder data can be destroyed contactless. 

To better illustrate the system, an example is 
described. In a security access application, all tran- 
sponders have the same Selective Address. The 

3 
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reader or host computer automatically changes the 
Selective Address each week. The computer re- 
members both Selective Addresses and the time 
(TIME CODE) when both Selective Addresses to- 
gether with the Two Codes are valid. In order to 
read the transponder, the reader transmits the 
Write protocol shown in Figure 3, alternatively 
transmitting both Selective Addresses. When the 
transponder has neither of these Selective Ad- 
dresses stored in its memory, the transponder will 
not respond and access to the secured room is 
denied. Because the Selective Address changes 
every week, the transponder can only open the 
door for a maximum of two weeks if the Selective 
Address is not renewed. A new Selective Address 
and Time Code is only programmed in the tran- 
sponder by the door reader, when one of the 
Selective Addresses and the relates Time Codes 
are in the transponder memory, if after twoo weeks 
the Selective Address is not used by the door 
reader, the transponder will not respond to the 
reader and therefore access will be denied. 

If a manipulator tries to discover the Selective 
Address by programming the transponder with an 
ASWR unit to random Selective Addresses and the 
manipulator sucessfully discovers the correct 
Selective Address, the transponder will respond to 
the door R/W unit. However, the R/W unit will now 
detect, with a very high probability, the wrong Time 
Code, which does not match the Time code stored 
in the RAW unit's memory. Upon detection, the RAW 
unit immediately reprograms the transponder with 
an invalid Selective Address or with a wrong Data 
BCC and locks these memory locations in the 
transponder. The transponder will be worthless or 
inoperatie due to this. If it's desirable for the tran- 
sponder to be operable for a longer period, either 
the time intervals for reprogramming the Selective 
Address and the corresponding Time Code or the 
number of valid Selective Addresses and corre- 
sponding Times Codes stored in the reader must 
be extended. 

A second somewhat different embodiment of 
the system is described. Each transponder in an 
application is equipped with one memory location 
(page) which contains an unalterable unique Selec- 
tive Address. This page can be read by a charge- 
only read as read-only transponders operate. There 
are other locations (pages) of the transponder. For 
example, these pages contain data that represent 
fare for a bus and are protected by the circuits 
described above. These pages can only be read, 
programmed or locked, when the correct Segment 
Code is used by the R/W unit as a start value for 
the CRC generator and the correct Selective Ad- 
dress is transmitted by the R/W unit. 

Let us suppose, that a manipulator knows that 
two transponders can be programmed to the same 
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value if they are within programming range of the 
reader while the fare is reprogrammed to a dis- 
counted value. The value of the transponder must 
be read before being programmed to a lower value. 
5 So, the manipulator tries to fill up an empty tran- 
sponder using a full transponder by moving both 
through the antenna field, in order to copy the full 
transponder value to the empty transponder. In 
other words, the manipulator tries to move the 

70 transponders through the field such that only the 
full transponder is read, but also such that both 
transponders are within the field during reprogram- 
ming to the reduced value. 

The manipulator will not succeed when the 

75 Selective Addressing Feature is used. The R/W 
unit reads the Selective Addressed of the full tran- 
sponder by addressing the affected page. For pro- 
gramming, the reader has to send the Selective 
Address match with the reader, otherwise program- 

20 ming is denied. Therefore, because the empty tran- 
sponder has a different Selective Address, the 
reader will neither read nor program the empty 
transponder. 

An illustration of the system as related to Fig- 

25 ure 1 follows. When the transponder resonant cir- 
cuit 10 is in the electromagnetic field of the R/W 
unit, the resonant circuit is enhanced to oscillate 
with the R/W unit frequency. Previously to transmit- 
ting the R/W unti generates a BCC by shifting the 

30 desired EEPROM address, the Selective Address 
and the corresponding Time Code and data 
through its CRC generator. The received RF volt- 
age is rectified by the RF part of the transponder 
integrated circuit (IC) 14 and the energy is stored 

35 in the charge capacitor C1 during the Charge 
phase, which is necessary to power up the tran- 
sponder for either a Read or Programming function 
(see Programming and Read function Figures 2 
and 3). The RF part 14 also demodulates the data 

40 received during the WRITE phase of either the 
Read or Programming functions, which occurs 
when the R/W unit transmits commands, address- 
es, data and BCCs to the transponder. Initially, 
switch 30, controlled by the Control Logic circuit 18 

45 and the input of the CRC generator circuit 16, to 
the RF part output. 

Depending upon the application, different 
selective addressable transponders may be used. 
For example, one transponder can provide both the 

so Selective Read function (Command-Selective 
Read) and a General Read function (Com- 
mand = Read). A different transponder may exclu- 
sively have the Selective Read function and no 
General Read function. Yet another transponder 

55 may have Selective Programming and allow no 
programming without a Selective Address. So, de- 
pending upon the type of transponder used and the 
command received from the interrogator, i.e. a cer- 

4 
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tain Write data format of which the length and 
plausibility is verified, the transponder decides 
what and if a function is executed. 

The Selective Addressable transponder is typi- 
cally a multi-page transponder within which the 
EEPROM is organized in blocks. Each block (page) 
has multiple bits. Generally, only one page can be 
read or programmed at a time. Therefore, the de- 
sired page must be addressed by a Page Address. 
The EEPROM Address circuit 20 comprises the 
Page Address and the Command. 

Therefore, when the EEPROM address 20 is 
received (first byte in the Write Data Frame as 
shown in Figures 2 and 3), the Control Logic circuit 
22 addressed the page and receives the desired 
command (Read, Selective Read, Program or 
Lock). The Control Logic circuit 22 then receives 
the additional bytes of Selective Address, data and 
BCC, depending upon the received command. But 
before really programming or transmitting the ad- 
dressed page, i.e. executing the function, the block 
is executed. Therefore, if Selective Addressing is 
desired (Command = Selective 

Read/Programming/Lock), the addressed page with 
the particular Selective Address is loaded out of 
the EEPROM circuit 26 and into the Input/output 
(I/O) Register Circuit 24. Because the incoming 
Selective Address and the Selective Address al- 
ready existing in the I/O Register circuit 24 are 
shifted simultaneously, they are compared bit-by- 
bit by the Selective Addressing Comparator circuit 
18. When all bits match, the Control Logic circuit 
22 receives an enable signal from the Selective 
Addressing Comparator circuit 22 receives a dis- 
able signal from the Selective Addressing Com- 
parator circuit 18 and the Control logic circuit 22 
discharges the charge capacitor C1 via transistor 
32. Simultaneously, all incoming bits are shifted 
through the CRC generator 16, which had been set 
previously during power-on-reset to the start value 
which is defined by the Segment Code. After a 
predetermined number of incoming bits have been 
defined by the received command (the EEPROM 
Address comprises the Page Address and the 
Command), the CRC generator 16 generates a 
BCC and reports the block check result to the 
Control Logic circuit 22 and the desired function is 
enabled or disabled. Therefore, the desired func- 
tion enablement is a function of both the enable 
signal from the Selective Addressing Comparator 
circuit 18 in addition to the favourable block check 
result from the CRC generator circuit 16. 

When the desired function enabled, swich 30 
controlled by the Control Logic circuit 22, switches 
the output of the I/O shift register circuit 24 from 
the Selective Addressing Comparator circuit 18 po- 
sition to the input of the RF part circuit 14 and to 
the input of the CRC generator circuit 16. Subse- 
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quently, the addressed EEPROM page, comprising 
a Selective Address, a Time Code and other iden- 
tification or sensor data, is transferred from the 
EEPROM circuit 26 to, the input of the I/O shift 

5 register circuit 24 and the output shift from the 
output of the I/O shift register is initiated. The 
digital data modulates the RF signal of the resonant 
circuit 10 while being transmitted back to the R/W 
unit. In addition, the CRC generator circuit 16 is 

10 again reloaded with the Segment Code and ini- 
tiated. The block check is initiated after the Frame 
block is transmitted. The FRAME bits are neces- 
sary in the R/W unit to prepare the receiver logic in 
the R/W unit to start the CRC generator circuit at 

75 the right time. The CRC generator circuit 16 gen- 
erates another BCC from the digital data that 
comes from the output of the I/O shift register and 
transmits it back to the R/W unit along with the 
previously mentioned data. After transmission of 

20 the I/O shift register content, the CRC generator 16 
is switched to a normal output shift mode and its 
content is transmitted consecutively. After trans- 
mission of the whole data frame, the charge ca- 
pacitor 12 is discharged by the Control Logic cir- 

25 cuit 22 which activates the transistor 32 to short- 
circuit the charge capacitor 12. 

When the desired function is disabled, either 
because the wrong Selective Address was trans- 
mitted by the R/W unit or the wrong BCC was 

30 generated alter reception of the command and oth- 
er data from the R/W unit, the Control Logic circuit 
22 initiates the discharge signal before executing 
the function. 

The Test Logic circuit 28 is only relevant if it is 

35 possible to modify the Segment Code (stored in 
EEPROM 26) via a separate test and configuration 
interface, i.e. via the manufacturer during produc- 
tion and test of the transponder. It allows faster 
programming of the EEPROM (Segment Code, 

40 Selective Address, etc) in a production line, without 
the use of application specific accessories. After 
the transponder is completely constructed, the test 
and configuration interface cannot be accessed. 
Figures 2 through 4 will be explained in slightly 

45 more detail than was explained in the above para- 
graphs, showing possible embodiments of the data 
formats. Figure 2 shows a Write Data Format for 
the Selective Programming function. The Selective 
Programming function consists of a Charge phase, 

so a Write phase, a Program phase and a Read phase 
for the Programming function. During the Charge 
phase, the R/W unit is transmitting an RF power 
burst, in order charge up the storage capacitor C1 
to power the transponder response. During the 

55 Write phase, the R/W unit transmits an EEPROM 
address, which comprises a command and a page 
address, the Selective Address and corresponding 
Time Code, other data and previously generated 

5 
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BCC to the transponder. During the program 
phase, the transponder is provided with another RF 
power burst in order to program into the EEPROM 
the Time Code and the data received during the 
Write phase. And then finally during the Read 
phase, the transponder sends EEPROM data 
(Selective Address, Time Code, Data), status in- 
formation, the page address and BCCs back to the 
R/W unit (as shown in Figure 4). 

Figure 3 shows the Write Data format for the 
Selective Read function. The Read function con- 
sists of a Charge phase, a Write phase and a Read 
phase. All three phases are similar to the cor- 
responding phases of the Selective Programming 
function, exceptt than no Time Code and no Data is 
transmitted. 

Figure 4 shows the response data format of the 
Read phase previously described in the Selective 
Programming and Selective Read functions. How- 
ever, one difference lies in the contents of the 
EEPROM address. The EEPROM address in the 
response data format comprises the addressed 
page's address and a Status Information instead of 
a Command as existed in the Read and Program- 
ming function EEPROM address. The status in- 
formation tells the R/W unit whether the executed 
command was executed successfully. 

A few preferred embodiments have been de- 
scribed in detail hereinabove. It is to be understood 
that the scope of the invention also comprehends 
embodiments different from those described, yet 
within the scope of the claims. 

While this invention has been described with 
reference to illustrative embodiments, this descrip- 
tion is not intended to be contrued in a limiting 
sense. Various modifications and combinations of 
the illustrative embodiments, as well as other em- 
bodiments of the invention, will be apparent to 
persons skilled in the art upon reference to the 
description. It is therefore intended that the appen- 
ded claims encompass any such modifications or 
embodiments. 

Claims 

1. A transponder comprising: 

a resonant circuit for receiving an RF signal 
comprising at least a selective address from a 
transmit/receive unit, having a CRC generator, 
and for transmitting a modulated RF signal to 
said transmit/receive unit; 
a memory circuit having at least one EEPROM 
cell for storing a unique selective address; 
a selective address comparator for comparing 
said received selective address with said 
\ selective address stored in said EEPROM 

memory circuit and for sending an enable sig- 
nal in response to the received selective ad- 



dress matching the stored selective address; 
a control logic circuit for enabling a function in 
response to an enable signal from said selec- 
tive address comparator circuit and a predeter- 

5 mined block check character; and 

a CRC generator for generating a predeter- 
mined block check character in response to 
the stored selective address and the received 
selective address matching and the start value 

to of said CRC generator in said transponder and 

said transmit/receive unit being essentially the 
same and for sending said block check result 
to said control logic circuit. 

75 2. The transponder of claim 1, wherein the con- 
trol logic circuit accesses said start value of 
said CRC generator. 

3. The transponder of claim 1, wherein further 
20 said selective address comparator circuit 

sends a disable signal to said control logic 
circuit in response to said received selective 
address not matching said stored selective ad- 
dress. 

25 

4. The transponder of claim 1, wherein further 
said control circuit sends a discharge signal in 
response to a disable signal from said selec- 
tive address comparator circuit or in receiving 

30 a block check character other than said pre- 

determined block check character. 

5. The transponder of claim 4, further comprising: 
a rectifier for rectifying said RF signal; 

35 a storage capacitor for storing said rectified RF 

signal; and 

a transistor for discharging said storage ca- 
pacitor in response to said discharge signal 
from said control logic circuit. 

40 

6. The transponder of claim 5, wherein said tran- 
sistor discharges said storage capacitor via 
conduction of said transistor, thereby shorting 
said capacitor to ground. 

45 

7. The transponder of claim 1 , wherein said start 
value of said CRC generator is stored in said 
EEPROM. 

so 8. The transponder of claim 1, wherein said 
selective address can only be modified at a 
predetermined time code. 

9. The transponder of claim 1 , wherein said time 
55 code is stored in said EEPROM. 

10. The transponder of claim 1, wherein said 
EEPROM circuit has a programming and lock- 
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ing function, but not an unlocking function. 

11. An ID system including a transponder as 
claimed in any preceding claim. 

5 

12. A method for providing a signal for transmis- 
sion in response to a received RF signal com- 
prising at least a selective address, including 
the steps of: 

storing a selective address; to 
comparing a received selective address with 
said stored selective address and providing an 
enable signal in response thereto in the event 
of match, enabling a funtion in response to 
said enable signal and a predetermined block 75 
check character, and generating a predeter- 
mined block check character in response to ^ 
said match and the start value of CRC's per- 
formed at transmission and reception being 
substantially the same. 20 



25 
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45 
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Figure 1; Block schematic of the transponder 
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Figure 3; Write dataaMixnet for ScUchit. TondTur! 
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Figure 4: Response ^TA 3E$v;en>c£ 
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(54) Protection against data manipulation in transponders 



(57) The present invention provides a transponder 
which can only be programmed by an authorized user. 

It includes a Cyclic Redundancy Check (CRC) gen- 
erator which checks during a WRITE function the data 
that is received from the reading/Writing (R/W) unit and 
also generates several protection bits (Block Check 
Character: BCC) which are sent back during the 
response function (READ). Before the CRC generator 
checks the data during a WRITE function, however, it 
must be set to a predetermined start value called a Seg- 
ment Code of the transponder in order for a Write (or a 



READ) to be performed. Furthermore, a Selective 
Addressing function is provided. The programming of the 
Selective Address must be done within a predetermined 
time window (has a predetermined Time Code). If either 
the Selective Address or the BCC generated by the CRC 
generator is incorrect, the transponder can be dis- 
charged such that it will not respond. In addition, if the 
R/W unit detects that the Selective Address is being pro- 
grammed at a time other than the predetermined Time 
Code, the reader makes the transponder inoperative in 
yet another way. 
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Q. 
LU 



Primed by Rank Xerox (UK) Business Services 
2.9.S/3.4 



BNSDOCID: <EP 0640939 A3_l_> 



EP 0 640 939 A3 



J 



European Patent 
Office 



EUROPEAN SEARCH REPORT 



Application Number 

EP 94 11 3148 



DOCUMENTS CONSIDERED TO BE RELEVANT 



Category 



A 
A 



Citation of document with indication, where appropriate, 
of relevant passages 



EP-A-0 309 195 (EMHART INDUSTRIES, INC.) 

* claim 17 * 

US-A-5 022 080 (DURST, R.T. ET AL.) 

* the whole document * 

US-A-4 454 600 (LEGRESLEY.B.P . ) 

* the whole document * 



The pr es e nt search report has been drawn op for all claims 



CLASSIFICATION OF THE 
APPLICATION (ULCLo) 



1-4,7,12) 
1-4,12 
1 



G06K19/073 
G06K1/12 
G06K7/00 
G06K7/08 



TECHNICAL FIELDS 
SEARCHED (IntO.*) 



G06K 



THE HAGUE 



Date erf cmk4«im «f tat mot* 

7 November 1995 



Herskovic, M 



CATEGORY OF CITED DOCUMENTS 



X : particularly relevant if takes alone 
Y : particularly relevant if combined wit 

document of the same category 
A : technological background 
O : boa-written disclosure 
P : intermediate document 



T : theory or principle underlying the invention 
E : earlier patent document, but pubusbed on, or 

titer the filing date 
D : document cited in the application 
L : document cited for other reasons 

A : member of the same patent family, cor r esp onding 



2 



BNSDOC1D: <EP 0640939A3_I_> 



